Github GraphQL query for vulnerabilities

[digitalcoyote]

With some parameterization, this should be the basis for querying the GitHub security advisory database for vulnerabilities

query {
  securityVulnerabilities(
    ecosystem: NUGET
    first: 100
    package: "log4net"
    orderBy: { field: UPDATED_AT, direction: DESC }
  ) {
    nodes {
      advisory {
        permalink
        identifiers {
          type
          value
        }
        cvss {
          vectorString
        }
        cwes(first: 100) {
          edges {
            node {
              id
            }
          }
        }
        summary
      }
      vulnerableVersionRange
      package {
        name
      }
    }
    totalCount
  }
}